Hey Travis, thanks for checking. On Fri, Aug 23, 2019 at 8:49 AM Travis De Silva <traviskds(a)gmail.com&gt; wrote: From https://www.keycloak.org/docs/latest/server_admin/index.html#sync-of-ldap... : *"As users log in, the LDAP provider will import the LDAP user into the Keycloak database and then authenticate against the LDAP password. This is the only time users will be imported. If you go to the Users left menu item in the Admin Console and click the View all users button, you will only see those LDAP users that have been authenticated at least once by Keycloak. It is implemented this way so that admins don’t accidentally try to import a huge LDAP DB of users."* Since LDAP group sync is time / performance expensive operation, assuming it's implemented this way not to negatively paralyse / impact the Keycloak performance within period sync runs by mistake. See "*Sync of LDAP users to Keycloak <https://www.keycloak.org/docs/latest/server_admin/index.html#sync-of-ldap... docs section for additional guidance & list of available sync options. Regards, Jan